0e15d9d9c2
add project visibility ui
2026-05-26 11:15:15 +02:00
793bd11dcf
remove member, invitation, and owner email disclosure from Teams/Show inertia props
...
The Teams/Show Inertia page serialized members, pending invitations, and the
owner email into props using only a belongsToTeam authorization gate, while
the corresponding API endpoints correctly enforced members:view and
invitations:view. The serialized data was unused by the live UI (the
TeamMemberManager partial that referenced it was orphaned), so dropping the
fields removes the disclosure surface without functional impact. The owner
card retains name and photo.
2026-05-18 19:04:57 +02:00
b73aa543fd
Merge commit from fork
2026-04-21 21:12:30 +02:00
53d91b65d6
fix: use timezoned dates in public report endpoint tests
...
Replace travelTo + now() with Carbon::now($timezone)->startOfDay() to eliminate flakiness when tests run near midnight UTC, where the UTC and Vienna dates can differ.
2026-03-31 13:21:54 +02:00
192c8c3b88
fix IDOR private projects
2026-03-19 13:52:28 +01:00
eed638d0aa
add default sorting to task, project, member, invitation, api token endpoints
2026-02-18 19:16:14 +01:00
c17d87b710
Allow updating public_until on already-public reports
2026-02-11 17:29:41 +01:00
28fc324c6a
Allow NONE filter value to shared reports and add shared-report tests
2026-02-11 17:29:41 +01:00
b2af9c6bf1
Add client_ids filter to time entry export
2026-02-11 17:29:41 +01:00
dd75a80df7
add no project, no task, no client, no task, no tag support to the API
2026-02-11 17:29:41 +01:00
51af3db305
Add test to TimeEntryEndpointTest
2026-01-28 12:56:58 +01:00
743c64909a
restrict time entries create endpoints for employees to only projects where they have access to
2025-12-17 12:54:07 +01:00
280032ee02
allow employee manage task setting to organization
2025-11-25 15:39:20 +01:00
1e985b71ec
move Client visibleByEmployee logic from controller to model
2025-10-21 12:22:17 +02:00
93d6a86f74
Show clients that are assigned to the employee, closes #893
2025-10-21 12:20:28 +02:00
19a206d57c
add prevent_overlapping_time_entries setting to organization
...
when enabled users are blocked from creating or editing new time entries that are overlapping with other time entries
2025-10-13 14:23:41 +02:00
e7fa414c06
Restrict rounding to premium users
2025-07-23 16:09:36 +02:00
e3cfc155b8
add rounding frontend to reports, and support for shared reports
2025-07-17 18:38:21 +02:00
4b726635b2
Add rounding feature
2025-07-17 18:38:21 +02:00
2ab28001be
Updated dependencies; Major update laravel passport
2025-07-17 11:47:34 +02:00
47aa65d959
Add checks for placeholder invitation; Fixed bug in member deletion
2025-07-08 16:49:05 +02:00
ead9cf2185
Add option to delete members with relations
2025-06-30 12:54:22 +02:00
48f09421d0
Fixed time entries exports for employees #2
2025-05-16 15:14:22 +02:00
36caadeb14
Fixed time entries exports for employees
2025-05-16 13:20:23 +02:00
284d8cd786
Add unit test for currency endpoint
2025-05-13 16:32:11 +02:00
68f636c8ff
fix shared report endpoint test to check new structure that includes organization format properties, format
2025-05-13 16:32:11 +02:00
f1a1d2a266
Project name is now unique per client and organization
2025-04-25 17:55:29 +02:00
ae00fdb0e9
Add localization settings
2025-04-23 14:33:32 +02:00
6ba0b19d40
change dashboard ui to use api instead of inertia props
2025-03-19 15:42:25 +01:00
01f6f0f5ea
Add chart endpoints
2025-03-19 15:42:25 +01:00
50cc7053e4
hide total billable amounts from employees when employees_can_see_billable_rates is disabled
2025-03-10 15:43:08 +01:00
73ce5f793d
Fixed problem with merge into when project members already exist in destination member
2025-03-10 15:42:43 +01:00
ab263e725f
Fixed bugs in member endpoints; Added merge-into member endpoint
2025-03-06 14:44:11 -05:00
ae76135373
Add filament resource for tokens; Ignore non-personal tokens in API token endpoints
2025-02-13 17:04:18 -05:00
69a8c8bb2b
Fixed api token endpoint documentation
2025-02-13 17:04:18 -05:00
bbed618fdc
Added API endpoints for user API tokens
2025-02-13 17:04:18 -05:00
d924fa74ec
Moved force https logic to a middleware; Changed default for config session.secure
2025-02-08 10:40:15 -05:00
e90fa8307f
Fixed timezones in unit tests
2024-12-20 19:57:50 -05:00
62270382dc
Fixed import lock
2024-12-18 11:26:49 -05:00
a4d8a02b80
Updated PDF reports
2024-12-09 12:57:25 +01:00
0860aa9d24
Added shareable reports
2024-12-09 12:57:25 +01:00
c03aad1abd
Added shareable reports
2024-12-09 12:57:25 +01:00
9e77500d94
Extended healthcheck debug in debug mode
2024-11-15 13:17:33 +01:00
9a60e2b911
Add tests for export endpoints
2024-10-29 17:20:21 +01:00
401cd4be0a
Fixed setting multiple time entry description to an empty string
2024-10-22 16:45:21 +02:00
4c27f1a2de
Fix bugs in computed attribute calculation
2024-10-15 12:57:45 +02:00
69d3ff4f7b
Stricter validation for uuid and integer
2024-10-15 12:57:45 +02:00
d5a4df738f
Fix bug in time-entry.update-multiple; Add computed property for client_id
2024-10-08 19:19:08 +02:00
071895791c
Add endpoint to delete multiple time entries
2024-10-08 13:26:27 +02:00
fcba96fbf6
Renamed skip to offset
2024-10-08 12:59:04 +02:00
Gregor Vostrak
Constantin Graf
Alexander Groß